A critical out-of-bounds read vulnerability in the Windows Kernel allows an authenticated attacker to elevate privileges on a local system, potentially leading to a full system compromise.

This vulnerability consists of an out-of-bounds read and potential heap-based buffer overflow within the Windows Kernel. An authenticated attacker can leverage this flaw to elevate their local privileges, bypassing standard security restrictions on the host machine.

The ability to escalate privileges locally poses a severe threat to workstation and server security, as it allows an attacker to gain administrative control over a compromised device. With a CVSS score of 8.8, this vulnerability is highly dangerous, as it provides a path for an attacker to disable security software, access sensitive data, or install persistent backdoors.

Immediate Action: Deploy the latest security updates from Microsoft to all workstations and servers running the affected Windows versions.

Proactive Monitoring: Review endpoint security logs for signs of unauthorized privilege escalation attempts or kernel-level exceptions.

Compensating Controls: Maintain strict least-privilege policies for all user accounts to minimize the potential impact if a local account is compromised.

Public Exploit Available: Unknown.

Because this vulnerability targets the Windows Kernel, it is critical to apply the provided security updates as soon as possible. Organizations should ensure their patch management processes are up to date to protect against the high risk of local privilege escalation.